Joomla Weblinks Shell Upload

Exploit Title : Joomla comweblinks Shell Upload Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : allinurl:/index.php?option ename jformdescription asset=comweblinks Software link : http://extensions.joomla.org/extensions/extension/official-extensions/weblinks Tested on:...

Joomla! 'com_weblinks' Component 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Joomla! 2.5.x < 2.5.16 / 3.x < 3.1.6 Multiple XSS

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.16 or 3.x prior to 3.1.6. It is, therefore, affected by multiple cross-site XSS scripting vulnerabilities, related to the comcontact, comweblinks, and comnewsfeeds...

[20131102] Core XSS Vulnerability

Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds...

Joomla Component com_weblinks SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component comweblinks SQL Injection Vulnerability ========================================================= Author: ViRuS Qalaa Email: email protected My Sites :...

CVE-2010-2679

The vulnerability CVE-2010-2679 affects the Joomla! WebLinks extension (com_weblinks). It is a SQL injection flaw that can be triggered by the id parameter in the view action of index.php, allowing remote attackers to execute arbitrary SQL commands. The issue is documented with a high-severity CV...

Joomla Component com_weblinks Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

Joomla! Component com_weblinks - id SQL Injection

Joomla! Component comweblinks - id SQL Injection source: https://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

[20081102] - Core - com_weblinks XSS vulnerability

comweblinks allows raw HTML into the title and description tags for weblink submissions from both the administrator and site submission forms...